$ rpki-client -vvf repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft File: F03C1838587677BF6505C46715F42F8B8416F949.mft (raw, json) Hash identifier: PjXxI9GpYCR57nzxQ6khqbedv4Hakj36oA+1kpeMO0E= Subject key identifier: 00:C4:71:9C:4E:F8:3D:DF:46:AB:D8:F9:16:74:47:8E:46:C1:D0:DF Authority key identifier: F0:3C:18:38:58:76:77:BF:65:05:C4:67:15:F4:2F:8B:84:16:F9:49 Certificate issuer: /CN=F03C1838587677BF6505C46715F42F8B8416F949 Certificate serial: 53DDB32BFAEB1D98BA47B4E2B2B58AACFC296CA3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft Manifest number: 01AF Signing time: Sun 15 Jun 2025 17:11:44 +0000 Manifest this update: Sun 15 Jun 2025 17:06:44 +0000 Manifest next update: Thu 19 Jun 2025 00:26:44 +0000 Files and hashes: 1: F03C1838587677BF6505C46715F42F8B8416F949.crl (hash: aJHAt+v8Et5+a9K8VDbYbdVhWvfYCVYYHrhE5Hbniek=) 2: 323430363a3563303a3a2f33322d3438203d3e20313430333935.roa (hash: Md2Gwc22wRKTc5mUc5ELs7bt6G77R7I0eKIAvlpl/5s=) 3: 3130332e3135302e3135302e302f32332d3234203d3e20313430333935.roa (hash: IwYVvleYOXDE1KvxJlP/VyImH81zWBJgWu/EFn3XzgQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.crl rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 00:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:dd:b3:2b:fa:eb:1d:98:ba:47:b4:e2:b2:b5:8a:ac:fc:29:6c:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F03C1838587677BF6505C46715F42F8B8416F949 Validity Not Before: Jun 15 17:06:44 2025 GMT Not After : Jun 19 00:26:44 2025 GMT Subject: CN=00C4719C4EF83DDF46ABD8F91674478E46C1D0DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:25:8b:b9:ec:f3:57:dc:02:59:07:af:f5:74: ce:2d:43:58:22:b0:d3:5b:29:55:82:ed:db:d7:5c: 88:86:4c:e2:c0:58:af:2a:55:5c:07:a1:1e:a0:e2: 9c:06:15:06:51:ca:18:f0:0d:09:ac:52:2d:03:e9: db:5e:5c:84:51:af:96:ae:e1:11:5b:f6:b9:5f:e7: 59:50:75:92:2e:01:ff:ff:ff:0a:91:7a:e8:e2:a0: b3:1a:ff:1e:08:2e:8a:e8:4b:fd:f9:14:ab:80:c9: b7:3d:80:b3:85:0f:f2:6c:08:77:13:e3:90:a5:48: da:97:7f:39:60:5f:e5:c0:88:a0:6e:1c:07:d1:f7: 01:23:7c:31:77:af:be:95:62:fa:44:b3:50:a9:25: 35:e4:46:ec:be:17:d9:40:d2:9a:d4:35:63:cf:9d: 04:3d:1f:18:cd:c0:a6:2a:bc:16:2a:ae:56:e9:23: 9e:41:f7:3d:01:39:2a:a4:2e:e7:33:2c:5f:ce:ac: 99:b4:d0:90:18:24:cb:76:7f:5c:17:7e:e5:5d:da: f4:d0:1c:05:4d:94:e3:f6:18:5d:69:d5:b5:b9:cc: 44:96:17:a8:14:93:41:3c:c3:89:73:99:c7:85:d6: 05:95:8d:bf:42:78:dd:2e:42:b6:a7:af:7c:62:67: 4e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C4:71:9C:4E:F8:3D:DF:46:AB:D8:F9:16:74:47:8E:46:C1:D0:DF X509v3 Authority Key Identifier: keyid:F0:3C:18:38:58:76:77:BF:65:05:C4:67:15:F4:2F:8B:84:16:F9:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F03C1838587677BF6505C46715F42F8B8416F949.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bd3dd79-8635-4857-8a3c-985954516f9e/0/F03C1838587677BF6505C46715F42F8B8416F949.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:8d:ca:d1:81:86:ab:56:06:06:d1:d9:be:19:b7:f7:88:f5: 59:b6:37:64:3f:4a:5b:49:ff:78:a5:38:af:dd:28:51:65:50: 0b:f6:de:c5:32:b6:c4:6a:b9:f4:05:ab:6e:e2:bf:f3:04:6a: e8:ef:87:1b:e9:ec:a1:47:31:af:8b:01:84:0d:be:8a:be:4e: 16:43:1a:ec:27:3a:05:8e:3c:fa:54:15:1f:97:03:5c:cc:ed: ed:c0:95:ac:4d:f6:32:cc:9d:c6:66:a5:55:fa:af:ae:1a:f1: 2a:7b:6d:df:1e:b5:c9:3a:31:95:2d:5a:71:3d:46:2a:5b:5c: 91:a7:ea:19:29:d2:7c:77:64:7e:4e:6a:82:df:55:94:ac:f0: b6:eb:10:9f:bc:4b:5e:07:a4:e2:f4:b8:db:7d:3d:74:a6:6a: 9f:9f:ab:14:04:92:19:38:d6:fa:6c:99:ce:72:d0:59:6e:c5: 69:9d:d0:28:7f:60:22:fe:8f:da:9d:5a:c2:35:ca:ef:fa:8a: c7:43:41:ea:50:ed:91:87:49:a0:1a:74:62:db:31:a2:a0:b4: 61:d4:c4:1e:cc:42:fe:f5:da:8e:a6:b8:ca:33:0c:31:1c:6f: 1f:35:6b:56:fd:cf:9f:43:0e:a1:07:76:bb:4d:68:4a:72:6b: 9f:d9:fb:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU92zK/rrHZi6R7TisrWKrPwpbKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjAzQzE4Mzg1ODc2NzdCRjY1MDVDNDY3MTVGNDJGOEI4 NDE2Rjk0OTAeFw0yNTA2MTUxNzA2NDRaFw0yNTA2MTkwMDI2NDRaMDMxMTAvBgNV BAMTKDAwQzQ3MTlDNEVGODNEREY0NkFCRDhGOTE2NzQ0NzhFNDZDMUQwREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpJYu57PNX3AJZB6/1dM4tQ1gi sNNbKVWC7dvXXIiGTOLAWK8qVVwHoR6g4pwGFQZRyhjwDQmsUi0D6dteXIRRr5au 4RFb9rlf51lQdZIuAf///wqReujioLMa/x4ILoroS/35FKuAybc9gLOFD/JsCHcT 45ClSNqXfzlgX+XAiKBuHAfR9wEjfDF3r76VYvpEs1CpJTXkRuy+F9lA0prUNWPP nQQ9HxjNwKYqvBYqrlbpI55B9z0BOSqkLuczLF/OrJm00JAYJMt2f1wXfuVd2vTQ HAVNlOP2GF1p1bW5zESWF6gUk0E8w4lzmceF1gWVjb9CeN0uQranr3xiZ05LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAMRxnE74Pd9Gq9j5FnRHjkbB0N8wHwYDVR0j BBgwFoAU8DwYOFh2d79lBcRnFfQvi4QW+UkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmQzZGQ3OS04NjM1LTQ4NTctOGEzYy05ODU5NTQ1MTZmOWUvMC9GMDNDMTgzODU4 NzY3N0JGNjUwNUM0NjcxNUY0MkY4Qjg0MTZGOTQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjAzQzE4Mzg1ODc2NzdCRjY1MDVDNDY3MTVGNDJGOEI4NDE2 Rjk0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkM2RkNzktODYzNS00ODU3LThh M2MtOTg1OTU0NTE2ZjllLzAvRjAzQzE4Mzg1ODc2NzdCRjY1MDVDNDY3MTVGNDJG OEI4NDE2Rjk0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMeNytGBhqtWBgbR2b4Zt/eI9Vm2N2Q/SltJ /3ilOK/dKFFlUAv23sUytsRqufQFq27iv/MEaujvhxvp7KFHMa+LAYQNvoq+ThZD GuwnOgWOPPpUFR+XA1zM7e3AlaxN9jLMncZmpVX6r64a8Sp7bd8etck6MZUtWnE9 RipbXJGn6hkp0nx3ZH5OaoLfVZSs8LbrEJ+8S14HpOL0uNt9PXSmap+fqxQEkhk4 1vpsmc5y0FluxWmd0Ch/YCL+j9qdWsI1yu/6isdDQepQ7ZGHSaAadGLbMaKgtGHU xB7MQv712o6muMozDDEcbx81a1b9z59DDqEHdrtNaEpya5/Z+1s= -----END CERTIFICATE-----Generated at Mon Jun 16 19:53:18 2025 by rpki-client